CVE-2026-32072
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
Improper authentication in Windows Active Directory allows an unauthorized attacker to perform spoofing locally. The vulnerability relates to an incorrect identity verification process.
Risk Assessment
An unauthorized local attacker can impersonate another identity in Active Directory, potentially leading to privilege escalation or unauthorized access to resources. This may compromise the integrity of the domain environment.
Recommendation
Apply Microsoft Windows Active Directory security updates. Strengthen monitoring of authentication events and restrict local access to critical systems.
Other vulnerabilities in Windows Active Directory
See all- CVE-2026-65777Medium
Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network.
- CVE-2026-49179High
Improper neutralization of special elements used in a command (command injection) in Windows Active Directory allows an unauthorized attacker to execute code over a network.
- CVE-2026-54115High
Integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate privileges locally.
- CVE-2026-50682High
An out-of-bounds read vulnerability in Windows Active Directory. It allows an authorized attacker to deny service over a network.
- CVE-2026-55001High
Improper certificate validation in Windows Active Directory allows an authorized attacker to elevate privileges locally.
- CVE-2026-54119High
Infinite loop vulnerability in Windows Active Directory. An unauthorized attacker can remotely cause a denial of service.
- CVE-2026-33826High
Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network.
Original NVD description (English source)
Improper authentication in Windows Active Directory allows an unauthorized attacker to perform spoofing locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS